Personal data

Privacy policy

How depredurand.com collects, uses and protects your data. Version of October 10, 2026.

Translation provided for information only: the French version is the only legally binding one. Version française

Data controller

The data controller for data collected on depredurand.com is Nicolas Depredurand, 2 rue Jules Ferry, 88190 Golbey, France.

For any question about your data, use the contact form (subject “Personal data”) or write to the postal address above.

Data collected, purposes and retention periods

The site only collects data when you voluntarily fill in a form. No data is collected without your knowledge, sold or used for advertising, and no automated decision-making or profiling takes place.

Processing	Data	Purpose	Legal basis	Retention
Contact form	First name, last name, email, subject, message; non-reversible hash of the IP address	Answering your request (partnership, company sale, press…)	Legitimate interest (Art. 6(1)(f) GDPR)	3 years from receipt of the message
Application	First name, last name, email, phone (optional), area of interest, introduction, CV, cover letter and video (optional); hash of the IP address	Reviewing your application and getting back to you	Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR)	2 years from receipt if the application is not successful; if hired, transferred to the personnel file
Protection against spam and abuse	Hash of the IP address (HMAC SHA-256, the address is never stored in plain text), submission date	Limiting automated and abusive submissions	Legitimate interest (Art. 6(1)(f) GDPR)	Submission attempts: 24 hours; hash linked to a submission: same period as the message or application
Hosting provider’s technical logs	IP address, date and time, page requested, browser	Service security, troubleshooting, responding to legal requests	Legal obligation (French LCEN law) and legitimate interest	12 months maximum

Fields marked with an asterisk are required: without them, your request cannot be processed. Once the periods above have expired, data is deleted automatically.

Applications in particular

Your CV, cover letter and video introduction are used exclusively to assess your application within LWS Group. They are never used for any other purpose or shared outside the people in charge of recruitment.

The information requested is directly related to the position or to assessing your professional skills (Article L.1221-6 of the French Labour Code). Please do not send any unnecessary sensitive data (health, opinions, origin, etc.).

If your application is not successful, your file is kept for 2 years so that we can offer you another position, then deleted. You can ask for it to be deleted earlier at any time.

Recipients

Nicolas Depredurand, recipient of all messages.
The people in charge of recruitment within LWS Group, for applications only.
LWS (Ligne Web Services), Golbey, as processor (Article 28 GDPR): hosting of the site, database and email, under a data processing agreement.

Your data may also be disclosed to authorised authorities where required by law.

Hosting and transfers outside the European Union

The site, its database, application documents and notification emails are hosted in France by LWS. No data is transferred outside the European Union.

Fonts and all site resources are served from depredurand.com: no request is sent to third-party services (Google Fonts, CDNs, analytics tools) while you browse. Links to LinkedIn, Amazon or group websites take you away from depredurand.com; the privacy policy of the destination site then applies.

Security

Encrypted connection (HTTPS) across the entire site.
Database and documents stored outside the web-accessible area; access restricted to an administrator account protected by a username and password, locked after repeated attempts.
IP addresses never stored in plain text (non-reversible cryptographic hash).
Automatic deletion of data once its retention period has expired.
In the event of a data breach presenting a risk, notification to the CNIL within 72 hours and, where necessary, information of the people concerned.

Cookies and trackers

depredurand.com does not set any analytics, advertising or social media cookies or trackers. No consent banner is therefore needed. Only the administration area, reserved for the publisher, uses a session cookie strictly necessary for authentication, which is exempt from consent.

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your data:

Access to and a copy of your data;
Rectification of inaccurate or incomplete data;
Erasure of your data;
Restriction of processing and objection to processing based on legitimate interest;
Portability of the application data you provided;
Instructions on what happens to your data after your death.

To exercise these rights, use the contact form (subject “Personal data”) or write to Nicolas Depredurand, 2 rue Jules Ferry, 88190 Golbey, France. You will receive a reply within one month. If there is reasonable doubt about your identity, proof may be requested.

Complaints to the CNIL

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

Changes

This policy may change, in particular if a new processing activity is introduced. The version date appears at the top of the page; the version accepted with each form submission is stored with your request.